The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0266 advisory.

  - OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)

  - OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)

  - OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)

  - OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)

  - OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

  - OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 / 9 : java-11-openjdk (RHSA-2024:0266)

high Nessus Plugin ID 189191

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.0

Version 1.3 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404281425
Version 1.2 Feb 19, 2024, 5:58 PM Plugin metadata Plugin Feed: 202402191758
Version 1.1 Jan 26, 2024, 11:18 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202401262318
Version 1.0 Jan 19, 2024, 12:43 AM New Plugin Feed: 202401190043
Version 1.0 Jan 26, 2024, 9:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401262100